Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa
File:                     323830343a326437303a3a2f33322d3332203d3e20323635323832.roa (raw, json)
Hash identifier:          nmoDArWRO0uLHbSAC4h2F96tm5C0wVkRpDyqnAkDCMY=
Subject key identifier:   50:69:AB:96:17:9B:90:C8:DF:F9:FA:87:9E:A5:1E:F0:BC:C2:1E:15
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       6ECF0871963DDEE9F4A5D29EF7E2F75A73CB13CD
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa
Signing time:             Mon 14 Oct 2024 13:20:13 +0000
ROA not before:           Mon 14 Oct 2024 13:15:13 +0000
ROA not after:            Mon 13 Oct 2025 13:20:13 +0000
asID:                     265282
IP address blocks:        2804:2d70::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cf:08:71:96:3d:de:e9:f4:a5:d2:9e:f7:e2:f7:5a:73:cb:13:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Oct 14 13:15:13 2024 GMT
            Not After : Oct 13 13:20:13 2025 GMT
        Subject: CN=5069AB96179B90C8DFF9FA879EA51EF0BCC21E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:66:96:5d:8b:aa:d2:64:fc:42:30:ab:6a:
                    3a:b1:48:e2:2a:d5:78:c2:47:f6:5c:61:4c:d5:35:
                    7d:b9:88:cb:5e:2d:60:28:a9:d2:80:24:f5:94:ed:
                    22:ea:5d:5a:1e:12:9f:ee:51:97:81:25:0a:ef:77:
                    35:0d:22:d3:5a:bf:76:77:99:12:81:41:f1:d0:16:
                    71:d7:26:99:5b:03:dd:d7:1d:28:d0:6a:a2:55:43:
                    8e:e2:56:18:d9:35:80:76:0b:81:1a:44:33:63:35:
                    1b:e6:9b:72:ce:8f:ca:36:e0:27:9d:aa:d2:71:c5:
                    25:8c:dd:4c:e2:b6:8e:e2:91:db:30:fe:0c:d8:7f:
                    83:3a:5c:5a:1c:f6:0a:2f:e4:51:04:82:c9:c2:ec:
                    06:65:ea:a9:64:c3:ea:77:77:ac:b8:a3:01:24:6a:
                    e6:1f:8b:22:ad:4a:68:30:37:b8:a8:71:b3:b5:31:
                    61:4a:78:93:52:cd:88:67:42:27:d7:c8:e6:51:fd:
                    6a:45:49:b3:ee:00:90:16:2d:37:a9:a9:fa:08:62:
                    71:67:4a:ff:c5:cd:b5:d0:1e:26:d9:57:87:0b:89:
                    0d:6f:3d:40:4e:f0:51:73:a4:1b:37:02:58:a2:fa:
                    7c:58:4e:5a:14:89:bf:12:2b:72:e4:a5:a4:dc:ef:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:69:AB:96:17:9B:90:C8:DF:F9:FA:87:9E:A5:1E:F0:BC:C2:1E:15
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:83:ad:25:dc:7c:6b:8e:b5:19:94:2a:14:10:e2:9c:db:1a:
         8c:90:93:d2:6e:63:2a:4a:31:82:f8:d3:67:5e:08:23:78:78:
         93:42:26:e9:92:94:1a:2c:8f:fa:a5:65:73:4d:de:54:9a:22:
         d8:d5:08:22:63:54:0d:fa:d6:ea:44:cd:cb:01:79:00:80:f2:
         21:6d:f0:57:ba:ea:e0:0c:8b:d0:c9:73:d3:7c:91:e7:78:fd:
         c8:32:0e:83:7b:db:db:0a:0d:be:6a:e7:32:80:a4:01:54:40:
         a8:b5:0d:57:a5:49:97:b3:83:2b:a7:21:f0:8c:5b:7f:30:4c:
         78:6f:9e:da:d1:87:d8:b3:b1:76:07:43:c6:1f:54:cb:49:c0:
         82:36:82:9f:67:7e:a9:1d:86:a3:82:de:f2:c0:31:43:fd:d1:
         3a:32:5e:91:aa:86:02:b6:02:d9:29:e5:85:c4:18:f2:ef:e7:
         8b:1a:27:63:96:74:f2:b9:e0:2b:2d:f9:e0:72:01:8b:da:c8:
         ba:0c:da:eb:62:c7:00:96:0a:a7:0f:8e:07:95:8c:ce:16:5a:
         49:6c:ff:5e:6b:3d:89:53:d4:6c:77:ed:03:42:83:a7:18:38:
         17:e1:54:0a:aa:00:9c:c7:49:65:e8:04:79:9c:f0:5b:73:f9:
         98:36:4f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:16 2024 by rpki-client on console-fra.rpki-client.org